If you access your PVM from one of those sub nets your network traffic will be routed directly and not via VPN, so that you may safely enable or disable your VPN without loosing current network connections to your PVM.